Ensure the admin user shell is clish

中级别 1自动化checkpoint

说明

Giving admin the Expert bash shell by default bypasses clish role controls. PASS requires 'set user admin shell /etc/cli.sh'. Audited against the Gaia clish 'show configuration' output.

检查方式

审计方法: 配置正则匹配

匹配模式: (?m)^set user admin shell /etc/cli\.sh[ \t]*$

修复方式

修复方法: 操作指南或基础设施补丁

set user admin shell /etc/cli.sh save config WebUI: User Management > Users > admin > Shell = /etc/cli.sh.

属性

操作系统: 任意
标签: checkpointauthenticationmanagement
参考: CIS Check Point Firewall Benchmark - User Management - Admin shell (verify section number for your Gaia release)

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target checkpoint